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for error. As a result, it is possible for the user to 
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I- miKODOCTION 



A. THE EBOELEM 

Ccmputers are tods to be used by people -o naice comple- 
tion of tasks easier and more efficient. Yer work is just 
now being done to make it easier for people tc use the 
computers which are assisting them. Wrth the variety of 
both ccmputer systems and languages available it appears 
that it will be a icng rime before sufficient training is 
available tc provide computer literacy for all who want or 
need it. Ihe result of this is that two distinct groups of 
computer users exist - those who write programs for specific 
needs, and those whc use the software packages produced by 
the first gicup. 

Eut do users and user needs always fall into these two 
clear cut gicups, or is there a need for a means for users 
to tailcr software to their individual needs, or write therr 
cwn without becoming programming experts? One no longer has 
to be an expert mechanic tc know more about a car than how 
to drive it. Dees cne have tc be a computer programmer in 
erder to make full use of the resources and services of a 
computer? In the last decade, as computer cost has dropped 
and US3 of computers has become more common, various 
attempts have been made, and continue tc be made, to make 
access tc computers easier. 

Two areas exist, in both technical and non-t echnical 
fields, where non- program mers are using computers exten- 
sively as means to deal with a large volume of available 
information in an interactive manner. The first is in use 
cf query languages tc access a database. The second is in 
computer aided design. 
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B. 



FBEVICUS ATTEMPTS AT A SOLUTION 



1 La nqua ces 

Cne proposed solution to the above problem came in 
the exaaination of ways to simplify access to an online 
biblicciaphic retrieval system [Ref. 1 ]. Users of the 
system had to learn a different interaction language for 
each different computer system involved in the network. The 

questions were raised of whether the needs of the computer 
or the user should be given highest priority, and whether it 
would he possible to standardize or at least reach some 
compromise on access languages the us^r would need to know. 
Five solutrcns were proposed, covering a range of alterna- 
tives, In a totallv non-user oriented approach, the user 
could be required to learn numerous different languages, one 
for each system. A second alternative was use of a standard 
language; however, nc language standards yet exist. A third 
suggestion was the development of a system which could 
understand all languages. Due to the high cost and overhead 
involved, this was also considered infeasible. The two 
remaining viable alternatives, creating a system whicr. 
appeared to use a standard language or a system which 
appeared to be able to understand all languages, required 
use cf an intermediary to convert user languages to system 
languages. This • uniform izer ' , transparent to the user, 
would receive a command from the user in the user’s 
language, check it for syntax and semantics, and then 
convert it to the appropriate language for the object 
system. The reverse process would be followed for communi- 
cations from the object system to the user. Thus the user 
would be able to deal with various systems using only one 
interactive language if so desired. 
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^ • Cca cui. er Aided D^i _ 3 n S ysrems 

Mere technical sxaapies of a^tampts to make usa of 
compu-csr resources easier have occurred in rhe fiald of 
computer aided design (CAD) This is a growing field, with 
the number cf CAD systems both in use and proposed growing 
rapidly. Increasing use of CAD systems to design computer 
systems in particular is driven by the increasing complexity 
cf the systems and the components of the systems being 
designed. Several examples of the use cf computer system 
CAD systems, with various tools to make design easier, are 
the Programmer's Workbench, the 3-1 Project, the Carnegie 
Mellon Oniversity Regis ter -Transfer CAD System, and the 
automated design of control systems. 

a. The Programmer's Workbench 

The Programmer's Workbench (PHB) , described in 
References 2 and 3, was developed in conjunction with 
computer aided design systems to make possible a software 
development system which would be general enough tc be run 
cn different host machines and to be used on different 
projects, thus being both machine and application indepen- 
dent. Problems arise in both computer aided design and in 
software development as a result of multiple types cf 
computers, multiple languages, multiple databases, and 
poorly managed libraries. PWB, begun in 1973 at Sell Labs, 
was envisioned as a set of tools which could be useful 
throughout the design and maintenance of a computer system. 
PWB was designed to meet basic, continuing user needs for 
tools tc: generate and modify manuals and other documents; 

create, edit, compile, execute, and debug programs; perform 
syster generatior, irstalla tion, and integration processes; 
test the subsystems and total systems and analyze test 
results; track system changes and test reports; monitor 
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syscsni peifcraance and be able no siamlane and nodel sysnea 
operations; convert dana files and load dataoases when 
needed; and produce aanageaent reports and stanisrics 
throughout the develcpment and maintenance of a system. The 
first i up le itent a tion of PWE focused on the documentation, 
programming, and testing tools, assessing them as the most 
immediately useful aspects and the easiest for designers to 
learn . 

The initial PWB thus consisted of five modules. 
The jct-subniissicn module handled job preparation, transmis- 
sion from workstation to host, reports on status, and return 
of output. The module-control module Kept track of revi- 
sions to programs, assigning identification codes and propa- 
gating changes to other related modules. A separate change 
module handled project wide changes and trouble and status 
reports. The doc umentat icn-productnon module provided 
macros for formatting documents such as the design specifi- 
cations, test plans, and user manuals. Finally, the test- 
driver module provided means to simulate implementations on 
various ccntroil er/terminal combinatrons. 

Use of PiiE was found to have several benefits. 
Wost obvious was reduced cost. It was cheaper to develop 
PWB with one set of tools than to work directly cn each 
different best cemputer an the design prccess. The uniform 
programming environment produced by the PWB tools made 
training, documentation, programming standardization, and 
programmer retraining (for a new project or new machine) 
easier. Addit icna lly , it reduced the conflicts arising 
during acquisition of new machines as a result of the 
differences between ideal online machines and ideal software 
develcpment machines by providing an environment independent 
of the machine involved. Future work on PWB was expected in 
areas which would even further increase user convenience, 
such as using a standard programming language which FW3 
would then convert to code appropriate to the host machine. 



t. The S- 1 Project 



The S-1 Project, using rhe Srructurad 
Computer-Aided Logic Design System (SCALD), is described in 
Beferences 4 and 5. S- 1 was an attempt to use graphics to 

make the designer's job in the computer aided design of 
large digital systems easier. SCALD was developed to reduce 
required design time "by allowing the designer to expres his 
design cn the same level that he thinks about it" [Ref. 4: 
p. 271]. SCALD, written in Pascal, uses the Stanfcrd 

University Drawing System (SUDS) for designer input to the 
system. Designers input a high level logical design drawing 
through a giapnics terminal. A 'macro expander', working 
with a pictorial library of hardware components, repeatedly 
reduces the logical design to various stages of physical 
design, until data for the actual implementation and manu- 
facture is produced. SCALD was used at Lawrence Livermore 
Laboratory to design the S- 1 , a 550-chip ECL-10K processor; 
however it has not teen applied to general computer system 
design. 

c. The Car n egie-Me lien University Project 

The Car negie-Me lion University Register-Transfer 
Computer Aided Design (CJ!U RT-CAD) System, described in 
References 6, 7, 8, 9 and 10, was developed as a system 

which could design computer systems from inputs containing 
functional descriptions rather than structural aspects. 
Designer input to the system includes a behavioral descrip- 
tion of the system and the user's optimization criteria (for 
example, time cr cest) . Also included is a database of 
available hardware components which can be permanently 
stored and updated, rather than reentered each time. The 
system then transforms this input into a form readable by 
the 'allccator', and attempts to construct the desired 
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systen) frca compoaen's available ia the hardware library, 
withic the constraicts given by the designer. The C'lU 
ET-CAE systaa has been used in systea sioula-ion, design 
logic verification, and actual hardware design. It can be 
adapted tc different design styles, such as centralized, 
distributed, or pipeline systems. 

a. Automated Design of Control Systems 



Attempts have 
aided design in the design 
ning with fuctional descrip 
tion cf real-time controlie 
11 and 12, uses functional 
contingencies and tasks, 
contingency exists, and 
resulting required task, 
data (ccntrcilsr incut and 
designer and project info 
designer is converted into 
and then ccmpared with pcs 
descripticn library until a 
of the mcdel includes the 
tc the hardware realizat 
mcnitcr tc sequence the con 
pairs. 

Another icdei, 
rial flew diagrams as the u 
maticn, sines flow diagra 
Because the design system 
tions, it is possible tc es 
cation feraat using flow di 
is then converted into an 



also been made to use computer 
cf control systems, again begin- 
tiens. One mcdel for the automa- 
r design, described in Heferencss 
level input in terms of pairs cf 
a function to determine when a 
a procedure to carry cut the 
Also included are envircnaental 
output), design criteria, and 
rmation. Data entered by tne 
a 'primitive list' descripticn, 
sibie realizations in a hardware 
match is found. Implementation 
action linking the primitive list 
ions and the development cf a 
tingency test and task execution 

LOGZ-MIH [ Hef . 13], uses picto- 
eans to input basic design infer- 
d commcri donzicu* 

is ILziLzad tc control applies- 
tablish a strict problem specifi- 
agraa symbols. The flow diagram 
ittermeciate language and genera^. 



cptiii izat ions are done. In the final step, th 
language is combines with an interpreter f 



inter ne crate 
■ a specific 
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micrcccaiput sr zo produce the design outpuz. This two srep 
transforaiat icn maices it easier zo adapr the design systea zo 
new niicrcconipurers, since the design input can remain the 
same and only the interpreter must be rewritten. Another 
advantage of this system is in having the system, rather 
than the designer, write the design software, thus reducing 
the opportunity for errors. 



C. IBE CDRBENT SITOAIION IM COBPUTEH AIDED DESIGN 

In discussing the CBU ET-CAD system, Barbacci [Ref. 9] 
pointed cut that designers should not have to do "repeti- 
tive, time consuming tasks" such as generating detailed 
design inf orma ticn, monitoring changes in design documents, 
checking systems for electrical, logical, or physical compa- 
tibility, ci developing manufacturing information. Rather, 
as technology evolves, with primitive components becoming 
mors complex and the rate at which new components are intro- 
duced increasing, designers must be able to design at a 
higher level, and must be able to design faster. Ross, in 
commenting on computer aided design systems in general, and 
means for design of control systems specifically , pcinted 
cut that systems had to be attractive to be used, and should 
"perform a helpful part of the design task, must present the 
results in a useful format, and must be easy to use" 
[Ref. 11: p.87]. 

However, despite tne good intentions, a gap exists 
between the designer of a CAD system, with his or her 
assumptions and expectations regarding the user and the 
user's needs, and the actual user of the system. As 
discussed in References 14, 15, 16 and 17, CAD systems exist 

to aid the designer in the design process, not to automate 
it ccirpletely. CAD system users are not computer program- 
mers, hence their input should be in something close to 
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their design language, not in a programming language. In 
addizicn, it appears that each individual system is designed 
for a unique need, and with a unique language, thus limiting 
the user's flexibility. The tools wnich thus result from 
these false assumptions require users to think in a new way, 
or learn a new language, and are more of a hindrance than a 
help. Users are expected to be not just engineers or desig- 
ners in a particular field, but also computer programmers 
with time to learn a special purpose language. As with 
bibliographic query languages and procedures, a need exists 
for some sort of adaptability in computer aided design 
systems, and the languages which they use. 

D. THIS IBCJECT 

In an effective design environment, the designer can 
fccus cn design rather than spending time on implementation 
details and repetition of tedious tasks. The purpose of 
this project was to create a design environment in which, 
with a minimum of training in areas outside those actually 
required for design, a user would ne able to use the avai- 
lable tools to enter required data. Emphasis was placed on 
designing a workstation which operates in such a manner that 
the user is not required to learn an additional prcgramming 
language . 

The model developed for automated control system design 
served as a vehicle for this project. Tools were still 
needed in this model to create a workstation for design data 
input and convert that input to the primitive list format. 
This project focused on the man-machine interface of the 
model, the means to input the design data. 

The goal in designing and implementing this design envi- 
ronment was to build a workstation which removes the need 
for the designer to learn a specific language with which to 
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enter the data. Additionally, the system should present a 
user-friendly approach to the interface. Finally, the 
system shculd produce an output of the data entered in a 
user readable format which is ready to be converted to the 
primitive list format. 

Chapter Two will summarize the development of hardware 
descripticn languages and the human factors which must be 
considered in developing a computer aided design system. 
Chapter Three will examine the implementation decisions made 
regarding design of the system. Chapter Four discussses the 
implementaticn of the system, and Chapter Five considers the 
conclusions which can be drawn and recommendations made for 
future work. 
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accurate ccmmunication among designars and engineers; 
precise, concise, and convenienz docmenr ation ; 
a means fcr system simulation and varificanion; and 
a means to automate sysnem design and realization. 

Hardware design progresses through a hierarchy of stages, 
from system level thrcugh register- transfer and gate levels 
to circuit level and logic detail. Design can be approached 
from either a top-down or bottom-up perspective [Ref. 20: p. 
377]. As a result of tnis, some CHDLs deal with only cne or 
two levels in the hierarchy, while others attempt to deal 
with all levels in the process. Additionally, the earliest 
CHDLs described systems on only the most primitive level, 
and dealt directly with implementation. As systems became 
irore complex, higher level description languages developed, 
much as higher level programming languages have been formu- 
lated in the past decade. 
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• CEL 

CEL, descrit€d iz. Refsrencss 2 1 and 22, was ir.iro- 
duced in 1965 as "an Algol- lik<s coapu-ar design language" to 
provide a language which could be used as a standard design 
language, making possible both communication among designers 
and well-dccumented designs. Additionally, it was expected 
that CDL could be used to test and debug designs, simulate 
and evaluate performance, and make possible automated design 
and design cf more complex machines. CDL met the basic 
requirements set forth by Chu tnat it be like natural 
language, concise and precise, translatable into bcclean 
squaticns, able to be modified as the technology it was 
describing changed, and be able to represent and manipulate 
data, ccrtrcl, and timing signals in binary format, 

CEL descriptions, 'sequences* (which are actually 
micrcprcgrams) , are used to define the implementation cf an 
algorithir, and follow a standard format. First is a name 
for the sequence, followed by declarations of registers, 
subr egist er s , memory, terminals, and operations. Statements 
are the final component of the description. Each statement 
is labeled, either with a boolean label or a name if it is 
the first line in one cf the declared operations. Compound 
statements share a label and are expected to be executed 
within one clock period. Statements are not executed unless 
their bcclean labels are true; this provides the control 
structure. Thus, as shown in Reference 23, a typical 
segment of a sequence in CDL would be written: 

/fetch*p3/ In <- MDB, 

boolean label statement 

While CDL makes it possible to name basic circuits, 
registers, inputs, and outputs, and write conventional 
arithmetic and logical operations, it still remains a fairly 
low level description language. It retains the ability to 
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descrioe hit level actions such as a shifx., but wculJ be 
difficult tc use at higher than a r sgister- transf er level. 
However, an attempt has been made to extend CDL into hCL, 
Micrcccm f uter Design Language [Hef. 24], which will make 
possible the hierarchical description of a system through 
use cf level numbers. HDL can be used with SDL-1, Software 
Design Language 1, tc snow hardware and software interaction 
at a given level of a system. 

2 . AHF L 



A Hardware Prcgraaming Language (AHPL) , discussed in 
References 25, 26, 27, 28 and 29, was developed as an 

attempt to design a functional level, rather than a 
register- t ransf er level language. AHPL was based on the 
APL programming language, with APL's vector notation making 
it possible to mere easily deal with entire registers rather 
than individual flip-flops, while at the same time being 
able tc identify individual bits or segments of registers. 
AHPL attempted tc partition a system into control sequences 
and data registers, and provide an alternative tc circuit 
diagrams and state tables which became more involved as 
systeiis became mere complex. 

The standard format of AHPL consists of a declar- 
arion cf inputs, outputs, and registers, followed by state- 
ments, Rather than CDL's bcclean lanels, statement lines 
are labeled with sequential numoers to correspond to the 
rows in ar equivalent state table. All data transfers on 
one line are expected to occur simultaneously. Statement 
lines are executed sequentially, unless followed by a state- 
ment to branch to a different line. This produces a 'cen- 
trol sequence* of transfers and branches. As a final step, 

names can be assigned to transfers to produce a "combina- 
tional logic subroutine" [Hef. 25], with the name used 
instead cf the detailed notation. However, this is the 
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closest AHEL cones to being a functional rather than a 
register-transfer language. 

5. CCL 

Digital Systen Design Language (DDL) , described in 
References 30, 31, 32 and 33, was designed to fill seme of 

the design language needs not met by languages such as CDL 
and AHEL. It was developed to meet several goals, among 
them that it be useful at all levels of the design process, 
from block structured architecture to gate level activity, 
that it net be limited in application to a specific hardware 
technclogy, that it re able tc be used as a source language 
in automated design in the future, and that it provide docu- 
mentation which matched the actual system organization. 

The DDL system model consists of one or more auto- 
mata (finite state machines) which control data facilities. 
Data facilities can be either private, if controlled by one 
autematen, cr public, if controlled by more than one. Eacn 
autematen can be divided into segments. Repeated transfer- 
matiens cf this initial system description, or a design 
initiated at any intermediate level, will ultimately result 
in a final system description consisting of logic equations. 
Cietmeyei describes CDL as "not well suited for describing 
extremely abstract models. ...[ or ] for presenting fabrication 
and technclcgica 1 details. It is intended to bridge the 
gap" [Ref. 32: p. 38]. Later revisions of DDL add a module 
construct tc maintain modularity in each transformation 
output and thus make a top-down design methcdclcgy using DDL 
more feasible. 

4. SDL 

Also based on the concept that hardware design goes 
through stages from higher to lower level, SDL [Ref. 20] was 
developed with the objective of providing an "accurate 
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rspresent aticn cf structural information useful ovar all 
levels of the design process" [Ref. 20: p. 378], with a 

designer able to use SDL to map from higher level hardware 
primitives tc lower level implementations. 

A structural information description in SDL consists 
of a name, external connections (input/output), component 
types, and interconnections among the components. 
Additionally, each description must have a purpose or 
possible use statement, and an indication of which level of 
the design hierarchy (system, r agister- transfer) the 
descripticn refers tc. Level and purpose statements are 
related, and each purpose and level pair will use a library 
cf resources which are available at the next lower level in 
the design hierarchy. 

5. "S" 



Another language which uses an approach similar tc 
that cf SDL is •’ S" [ Bef . 34]. Design using "S" begins with 
a natural language description, since this is where a 
designer actually begins the design process. Also, this is 
easier tc understand than some of the formal design and 

description languages. "S" makes it possible to process the 

descripticn and add levels of increasing syntactic and 
semantic restrictions until all ambiguities have been 

removed. At this point the computer can examine implementa- 

tion possibilities. Basic structure of a description in "S" 
includes a declaraticn section, with input/output variables 
and their types, conditions (’inhibitors') cf the system, 
and a section for process description. 



6. ISP 



Instruction Set Processor (ISP) 



in References 9, 35, 36, 37, 



tions ISPl and ISPS 



were 



38 and 39, 
developed 



notation , 
and later 
as part of 



described 
mcdif ica- 
a set of 



f 
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languages irtanded cc be able to provide a description of a 
computer frcm the tcp of the hierarchy, the system level, 
down through the lower levels. A fifth level, the program- 
ming level, unique to computers, was added to the tradi- 
tional design hierarchy. This programming level is located 
between the system level and the r agister- transfer level. 
ISP is used to describe this level, that of the machine's 
instructicn interpretation cycle, where memory is accessed 
and operations are performed, in terms of the next lower 
level, the regis ter- transfe r level. IS? is thus the inter- 
face between the programming level and the register- transfer 
level. Symbolically a register-transfer language, but mere 
general than most, it describes what occurs at the 
register- trans fer level, but not how it occurs. ISP 

excludes timing data and other details of that sort. 

In format, ISP resembles other register-transfer 
languages. Declarations include memory, processor and 
registers, any external connections, and data types avai- 
lable. The remainder of the description is devoted to the 
instructicn interpreter, describing the steps in the fetch- 
execute cycle and each instruction in the instruction set. 

ISP has teen used extensively in the Carnegie-Hellon 
Onivexsity BT-CAD system described in Chapter One as a tcol 
tc describe digital systems, simulate and emulate systems, 
synthesize hardware and software descriptions, and verify 
designs. This has revealed some limitations in ISP 
[Ref. 38]. One is a lack of a formal semantic definition of 
the language, which has led to variations in the format of 
descriptions in ISP, and the use of IS? to describe only 
part cf a system. Another limitation is the lack cf a means 
to handle concurrency, timing data, and interconnected 
processors in ISP. 
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7 . CCNLAN 

As the numbei of computer hardware design languages 
multipliedr in was decided that the need existed for seme 
common base from which to develop future languages. As a 
result of this decision, a working group of the designers of 
AHPL, DDL, AND ISP, among ethers, was formed in the middle 
1970s to develop CONLAN (CONsensus LANguage) . Discussed in 
References 40, 41, 42, 43 and 44, CONLAN was intended to 

provide for greater acceptance of hardware description 
languages through prcvidir.g: 

a ccmmcD formal syntactic and semantic base for all 
levels and aspects of hardware and firmware description^ 
in particular for descriptions of system structure ana 
behavicr- . . 

a means for the derivation of user languages from this 
CO mic n ha se. . . 

fsupoert to] CAD tools for documentation, certification, 
design scace exploration, [and] synthesis 

[Bef: 40: p. 210]. 

It was expected that languages developed from Base CCNLAN 
would be designed for a specific set of tasks and have a 
limited scope, be easy to learn and simple to use, and have 
a clear semantic relationship to other languages also devel- 
oped frem Bass CONLAN. 

case CONLAN is defined oy three items, a set of 
object types and operations, syntax, and a computation 
model. It is defined with Primitive Sat CONLAN, a language 
used only for defining other languages derived in CONLAN. 
Cnca a language has been derived from Base CCNLAN, its use 
as a computer hardward design language follows a standard- 
ized fermat. Each description serves as a module by itself. 
A description is begun with a name, followed by a listing of 
asserticES of static conditions and dynamic constraints. 
Then the items from an external segment library, if any, are 
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listed, and internal and external variables are declarsd. 
Finally, the behavicr of the model is described, using 
activities and functions, with 'end* indicating the end of 
the description. 

8. CSDL 



While there have been numerous register-transfer 
languages developed, and attempts to develop languages which 
can trace design through the entire design hierarchy, there 
have been few languages written which actually define a 
system in terms of its functions ratner than its structure. 
Additionally, most computer aardware design languages 
describe operations which are carried cut in a definite 
sequence, rather than concurrently (programming languages 
have also followed this approach, with Ada being the first 
major language in which concurrency was included in the 
original design) , An at.tempt was made to meet both of these 
requirements in the development of CSDL, Control System 
Design Language [Ref- 45], utilized in the control system 
design automation project discussed in Chapter One. The 
goal of CSDL was to simplify problem specification and 
provide a means to automate hardware selection and software 
production in control system design. One way to accomplish 
this was to develop a language in which the designer had 
only to provide the behavior of the control system, what it 
did given certain inputs and outputs, rather than how it 
actually did it, or what hardware components were used. 

CSDL descriptions have four major sections. First, 
as an aid to good documentation, is an identification 
section with the designer's name, the date, and the design's 
title. This is followed by the environment, the input and 
output variables to and from the controller. Third are the 

contingency lists, the hey to what makes this a design for 
multiple concurrent activities. Contingency/task pairs 
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Dialogue is defined as " nonpr og uamming communication 
with a terminal" [Ref. 48: p, 53], and is what makes a 

computer system interactive. Responses from the system in a 
dialogue can be placed in one of three categories, those 
which never change, these which change periodically, and 
those which change cn a real-time basis as the dialogue is 
conducted. Dialogues in the first two categories are gener- 
ally written by the programmer and stored in memory. While 
real-time dialogue can be close to natural language, it 
requires a great deal of software, including both a dialogue 
translatcr cr processor and one or more dialogue files, as 
implemented in systems described in References 49 and 50. 

Dialogue style can be one of four types, based on 
two independent characteristics, whether the user of the 
system guides the the interchange, and whether the user is 
limited to given chcices in reply or can make a free 
response [Ref- 51], At the ends of the continuum, aialcgues 
which the system guides, with limited choice response, are 
faster, fcith fewer entries required for routine actions. 
User guid=d free response dialogues provide maximum flexi- 
bility (and maximum opportunity for error) for experienced 
users. Martin [Ref. 48], in what has become a classic in 
interactive system design, categorizes 23 techniques for 
dialogue design, with factors which can help determine the 
most effective type of dialogue fer a specific task and 
environment . 

Smith [Ref, 52] provides the two essential preper- 
ties of the resulting system. It should be effective, able 
to accomplish something significant in a 'reasonable* amount 
cf time, and it should be simple, although its simplicity 
will be inversely proportional to the complexity of the 
tasks it performs. In doing this, the system should be 
self-explanatory, self-helping, easy to use, able to antici- 
pate the user's actions, and able to adjust to the skill 
level cf the user. 
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Eeferenca 53 defines ihree compcnenus of a user 
interface: the user's conceptual nodel of the actions going 

on, the ccamand language used by the user to ccniicunicate 
with the system, and the information display used by the 
system to ccmm unicat e with the user. Increasing the signi- 
ficance or the graphics factor, and with some reorganiza- 
tion, Newman and S pxcul list four components of the user 
interface : 



User Mcdel - the model which the user has of the ir.fcr- 
mation involved and how it is being manipulated and 
processed. This component underlies tne other three. 

CoEnand Language - hew the user ODerates on the informa- 
tion and the mcdel. 

Feedback - how the system provides the user with infer- 
maticn and assistance in runnina the system and usina 
the mcdel. 

infermatien Display - the screen display of the state of 
the model and the information being' manipulated . This 

can be used to confirm that the user's oercection 
matches the state of the system [Ref- 54: pp- 445-448 ]- 



Cf critical importance is the fact that the user's 
model is a rental image, not something in writing. It is 
something with which the user must be comfortable, and be 
able to heceme familiar. Thus, to make the system easier to 
learn and, at least intuitively, easier to understand, the 
system should use ccncepts and language familiar to the 
user . 

2 . The Use r an d User Psychology 

The user, and the user's psychology, are seme of the 
first factors which must be considered in designing an 
interactive system frem wnich the user will be able to 
develop a useful and appropriate model. 

Sasen and Damodaran [Bef. 55] consider as signifi- 
cant factors in analyzing computer interfaces: job related 

user attrihutes such as the training provided and the 
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relat icnshi f between the user's total job and the coojputer 
systen; user require icents of the system, including psycholo- 
gical needs; variables related to the task such as structure 
and information handling; and individual user personality 
characteristics. Martin [ Ref. 48] has determined six basic 
criteria with which to categorize terminal operators. 
First, they can be either dedicated or casual, working cons- 
tantly at the terminal or only occasionally. The second 
consideration is their level of programming skill. Third is 
their intelligence level, specifically their short term 
memory span and ability to think logically. Fourth is their 
level of training and skill with regard to the terminal they 
are using. The fifth factor is whether they are active 
operators, taking the initiative in the task, or passive 
ones, following the direction of the computer. Finally, are 
there intermediaries between the user and the system, or is 
the user able to deal directly with it? Martin gives addi- 
tional consideration to the case of the totally untrained 
operator . 

Five potential blocks to maximizing user involvement 
with an interactive system exist [Ref. 56]. Users can 
become bored with a system if pacing of screens is too slow 
or response time allowed is too great. Unexpectedly long 
delays without system response can lead to user panic due to 
fear that there is somethin wrong in either the system or 
the program being executed. Frustration can result from 
being unable to easily, effectively, and efficiently commu- 
nicate with the system and safely recover from unwanted or 
unexpected actions. Inability by the user to formulate an 
appropriate user's model, caused by either excessive detail 
or lack of structure in the system, can lead to confusion on 
the part of the user. Finally, discomfort can result from 
shortccmings in the physical environment, such as poor 
lighting or lack of sufficient work space. 
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Belczed to seme of these potential prcblem areas are 
soae basic human psychological charac teristics. First, as 

noted by G. A. filler [Hef. 57], the factor seven, plus or 
minus twe, is a recurring item in human short term memory 
research. Whether data is considered as individual items, 
cr recoded into 'chunks' as, for example, letters ir 4 tc 
words, cr individual numbers into a telephone number, humans 
are generally able tc recall only seven chunks cr make accu- 
rate decisiens among nc more than seven choices. Exceeding 
seven (plus or minus two) units of data in providing infer- 
maticn can lead to information overload on the part cf the 
user . 

While :iiller has shown that people can handle mere 
data if they can greup it into chunks, human ability tc 
handle pictorial information can also be a factor in 
increasing the aiount of information a user can handle when 
working with an interactive system. Haber and Wilkinson 
[Ref. 58] point cut two principles in human visual percep- 
tion: the human vision system is dasigned tc capture the 

total situation perceived, and the system will try tc inter- 
pret all components as part of the scene. Thus, visual 
displays can be used to convey not just bits of information, 
but also the structure of the information, to the user. 
With this approach, there will be less need for the observer 
to consciously interpret the organization of the information 
presented, cr try tc group its individual components into 
chunks. 



This human need to organize information alec has an 
effect CD how people keep track of their activities 
(Ref. 59]. Just as people organize bits of information into 
chunks, they organize their activities into 'clumps', 
seguences cf steps which lead them toward a goal or accom- 
plishment cf a task. Completion of one cf these clumps of 
actions leads tc 'closure', indication that a job, or 
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subjct, has been finished and can be crossed off one's 
mental 'to do' list. When working in an interactive system, 
whether with other humans or machines, one expects no* only 
an internal feeling of closure upon completing a clump of 
actions, tut also a feedback response from the other part of 
tae system, either during or at the end of the activity. 
Depending on the specific type of action, this response is 
expected within a certain, limited, amount of time. Delay 
can lead to frustration and lack of continuity of thought, 
while closure and response brings the opportunity to clear 
short term memory and move on to a new thought. Response 

time delays are mere acceptable once closure has been 
reached than they are before, since short term memory can 
store data, such as a phone number, for only a limited 
amount of time. As a general rule, delays over two seconds 
are acceptahla once closure has been reached (waiting for 
the ringing after dialing a telephone number) , but not 
before (waiting for a dialtone so a telephone number just 
looked up can be dialed) . The decrease in efficiency 
resulting frem respense time delays is net a linear rela- 
tionship. Rather, a delay produces a sudden drop in user 
efficiency, followed by a leveling off for a period, what 
R. E. Miller refers to as "psychological step-dewn 
discc ntinui ties . " 



As a guideline to dealing with the characteristics 
of designers using CAD systems, Spence and Apperley 
(fief, 60] provide a checklist of items to be considered, 
based in part on the preceeding psychological factors: 



Short term memory is limited; an interruption will lead 
to forgetting. 

?sy chclcgica 1 clcstre is needed: provide an indication 

to the user that a task is complete. 

Consider computer response time; allow time for the user 
to see the result of an action. 

Respond tc control actions; predictability is needed. 
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Consider human pattern recognition skills; make use of 
then: in data inter pretati cn. 

Use words appropriate to the task; users need familiar 
terain elegy. 



Martin [Ref. 48] proposes that, when designing a 
systeir, it be considered on three levels; functional (how 
to use teth human and machine capabilities most effec- 
tively) , procedural (how to organize the system) , and 
syntactical (how to handle ccmmunca tiens between the user 
and the system) . Ginsburg, quoted in Reference 61, points 
cut the critical impcrtance of the user, and the user's 
perspective, in the effectiveness of an interactive system; 



Nothing can contribute more to satisfactory system 
perfcrmance than the conviction on the part of" the 
terminal operators that they are in cont.rol of the 
system and not the system in control of them. Equally, 
nothing can be mere damaging to satisfactory system 
ooeraticn, regardless of how well other aspects ci the 
implementation have been handled, than the operator's 
conviction that the terminal and thus the system are in 
control, have 'a mind of their own,' or are tuaging 
against rather than observing the operator's wisnes. 

[ p. 12 j 



This then leads to consideration of the remaining 
three components of the interface; the command language, 
feedback, and the information display, the more tangible 
components which make up the system hardware and software. 

3 . Cc m man d Langu ages 

Four design issues sxist with regard to the command 
language in an interactive system [Ref. 54: pp. 451-458]. 

First, how many modes should there be? More modes lead to 
greater cciplexity and thus more errors. Second, a selec- 
tion sequence for the use of commands and command parameters 
needs to he determined. In this, consistency is important. 
Third, an abort mechanism, through wnich a user can termi- 
nate an action begun, must be provided. Finally, an error 



handling aechanism must exist. A wide range of command 
language styles are available, including keyboard dialogue 
with screen prompts (flexible but inefficient), a keyboard 
command language with standard command words and a simple 
syntax (requires more user skill) , use of functicn keys 
(faster, simpler, but less flexible), and menu driven (mere 
flexible, fewer errors, uses more screen space). 

Seme guidelines have been proposed for designing a 
command language [Ref. 53: pp. 6-7], The language should be 
consistent: each key should always have tne same, cr at 

least an analogous, meaning in the language. Second, a 
minimum effort should be all that is required from the user 
to enter the commands, with the commands most frequently 
used being the easiest to enter. Finally, use of only one 
mode is encouraged. However, if more than one mode is 

necessary, any cna command should have the same meaning in 
each mode in which it can be used. 

There is net yet agreement on whether command 
languages should vary depending on the skill level of the 
user. J^czelco [Ref. 62] proposes five levels of user moti- 
vation and expertise, and corresponding types of command 

languages. The five user levels are: the user who is 

learning the basics; the user who wants only to use the 
system tc get acceptable results with a minimum of learning; 
the user who wants tc be able to use the system more inde- 
pendently; the user who wants to learn the more subtle 

features of the system; and finally, the user who wants to 
get the highest possible quality results. The five corres- 
ponding levels of command language range from simple 
languages using multiple choice questions and tutorials to 
more complex languages which use function keys and an editor 
to create command sequences for later use. While creating 
several languages for one system is costly in terms of beth 
time and money (and memory) , Mozelco thought the approach 
werth considering. 
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cams to 



Walthsr and O'Neill [ Hef . 63] came to rilaied 
conclusions. Subjects with different skill levels, working 
cn either teletype (IlY) or cathode ray tube (CRT) terminals 
were able tc work with either a flexible or inflexible text 
editcE. Use of the flexible language, in which users were 
able to abbreviate, emit, or change command words, among 
ether options, did not consistently improve performance. 
User attitudes, which were effected by all three variables 
(terminal type, language type, and skill level), had an 
effect cn performance, as did each cf the variables indivi- 
dually. With the inflexible language, even users with 
little experience made few errors. With the flexible 
language, fer all but those with the most experience, a less 
positive attitude led to mere errors. If job ccmpletion 
time were the only consideration, it appeared from the data 
that it would be appropriate tc provide more experienced 
users with a flexible command language to speed their work. 
However, if syntax errors were also a consideration, experi- 
ence alcne was not enough on which to base the language 
decision. Attitudes, something more difficult to measure, 
and mere likely to change over time, also had tc be consid- 
ered. This is consistent with dozelco's approach of 
providing several levels of command language and leaving the 
decision up to the user. Unfortunately, the question 
remains cf whether this approach is worth the cost. 

Cne of the mest important components of a command 
language is a 'help* facility. Shneiderman points out that, 
as with levels of language, user experience is not the best 
way to determine hew much help to provide, "since even 
experts may forget or be novices with respect to seme 
portions cf a system" [Sef. 61: p. 17]. He recommends that 
the user ccntrol the level of help provided through the help 
request made to the system. Relies and Price £Eef. 64] 
expand cn this, focusing on the needs of both the user and 
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the picgiaainjer of tne help facili*y. Help requests shculi 
te siirple, concise, and consistent, and the user should be 
able to maintain the current task during tne help sessicn. 
The help provided should be specific to the current context, 
and precise, providing only the information needed. 
Additionally, help messages should be polite, in the user's 
language, and should include information on what the user 
should dc next, or how mors detailed information can bs 
obtained. from the programmer's point of view, it should be 
pcssitls tc specify the help routines at a high level of 
abstracticn, separating writing the text of the message from 
writing the rest of the code. Finally, messages should be 
easy to write and easy to modify. 

^ • Iff c^ck a nd Error H andl ing 

Feedback to the user is provided with regard tc the 
command language system (a prompt, response tc a command, or 
error message) , the application database (the actual task 
being performed, such as text editing or CAD) , and the 
display terminal (cursor movement or character echo) . As 
pointed cut earlier, timely feedback is critically 
important . 



rerhaps the most important feedback is that 
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tne system. Whatever the cause, it is important that an 
error message be given as soon as possible after the error 
has occurred. Srrcr messages should be short and tc the 
point, but should net be negative or embarrassing tc the 
user. In addition to stating that tnere has been an error, 
messages should contain useful information, such as where 
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the eircr occurred and how to fix it. Finally, it should be 
possible to fix the error with a minimuin amount of work. 

5 . C 1 s 0 la V 

Two issues must be dealt with in the area of infor- 
maticn display: what will the overall layout be and how 

will objects and information be represented. While speoific 
layout oar. be detertrined by deciding exactly when the user 
requires what information, five general areas are needed: a 

main work area, an area for local editing and input, an area 
for system status indicators, a diagnostic area for error 
messages, and a menu/information area [Ref. 51]. Blinking, 
highlightirg, or reverse video can be used to draw attention 
to certain areas. Color can be used to lessen apparent 
clutter cn the screen, emphasize certain areas or items, 
confirm entry of data into the system, or make identifica- 
tion of seme items easier for the user. However, if color 
is tc be used, consideration must be given to the likelihood 
of cclcrblind users [Ref, 48]. 

henus can be used as part of the display as a conti- 
nuous source of information to the user, with cclor and 
position used tc group related items. To decrease the 
amount of screen space required, a hierarchy of smaller 

menus can be used. Additionally, consideration ' has been 

given tc the use of a hierarchy of dynamic menus which 
change as the dialogue pregrasses [Ref. 65]. With this 
approach, three menus are available on the screen at one 
time: a constant menu of most frequently used commands, the 

dynamic menu, and a menu of menus. While dynamic menus are 

possible, it is not yet knewn how feasible a system of this 

sort would he. 

Eased on the above information on computer descrip- 
tion languages and human factors, the design procedures 
followed and decisions made will be examined in Chapter 
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Three, Implemearaticn details will be discussed in Chapter 
Four . 
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Ill, DESIGN 



A. PBELIMINARI ASSOflFTIONS 

Ih€ underlyiEg ccrceprs guiding the design of th€ system 
follow those stated by Shneiderman; 

build systems that behave like tools; and 

recognize the distinction between human reasonina and 
computer power [Hef. 67], 

Martin echoes these concepts: " Do not t^ to make the 

comouter ccmtete with man in areas in which man is superior” 
[Ref, 48: p, 7]. Ihe intent of the system is, as noted by 
Ihomas [fief. 68], to make possible the synthesis cf designer 
and computer, to provide (a component of) a design system 
which will aid the designer in tcp-dcwn design of a control 
system, with behavioral descriptions as input. 

Several preliminary assumptions were made regarding the 
designer and the system. first, the designer has seme 
general programming knowledge (i.e. is familiar with the 
concepts cf block structured languages and top-down design) 
but does net necessarily know any specific language well. 
Second, he or she will also be familiar with the basic 
components cf a control system - tne contingency/task pairs, 
the environmental variables, the design criteria, and the 
task and contingency subroutines - and the information 
included in each of these components. Third, the designer 
will use the system occasionally rather than continuously, 
finally, for its initial implementation, the entire design 
will be entered and a realization produced at one time. 
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B. CISIGN CBITERIA 



Design criteria were considered in two categories: what 
the system should be able to do, and how it is organized to 
do it. Ihe system should (in order of decreasing priority): 



not require the designer to learn a specific design/ 
pr cgiaaffiing language; 

minimize the amount of repetitious, tedious work 
required from the designer; 

minimize actions taken by the system implicitly or by 
default which could lead to hidden errors; require 
explicit confirmation from the designer whenever 
possible ; 

ailcw the designer to make changes to already entered 
data without having to reenter all of the data; 

be able to respond to different levels of designer 
expertise . 



Regarding system organization, it should be: 



fully modularized; 

implemented as a ninimal set, with the ability in the 
future to : 



add new constructs and/or subroutines to the design 
language ; 

add new types and categories of design information; 

modify the format in which the design data is 
stored, both during execution and when written to a 
f ila . 



C. FBELIhlRABY DECISIONS 

Several basic decisions were necessary prior tc actual 
project design. 
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selection was 



Sel e ctio n 

Ihe primary consideration for system 
that the system be available for dedicated work. However, 
it was also important, since an interactive system was to be 
designed, that the system be able to meet most, if not all 
cf tte requirements generally provided fcr interactive 
systems. Martin [Ref. 48] proposes, as consideraticns when 
selecting ccmponents for interactive systems, that there be 
means fcr input by both the user and some document source; 
means fcr output; a display screen with appropriate capabil- 
ities, such as color; tools to provide the desired or needed 
level of security; and tools for error control. Irby 
[Ref. 66] expands cn the required screen capabilities, 
giving five necessary items: the programmer must be able to 

write tc arbitrary positions on the screen, be able tc map 
conceptual display primitive operations to device primitive 
operations, be able to highlight text and remove high- 
lighting, and have a coordinate input device which can be 
tracked on the screen. It was also considered desirable, 
though net necessary, that it be possible to scroll the 
screen, use different character fonts, and have a terminal 
intelligent enough tc be able to reply to questions from the 
display terminal interface. The VAX/VHS system, with GIGI 
(Graphics Image Generator and Interpreter) terminal and 
monitor [Ref. 69] was available at NPS, and, since it met 
most cf the above requirements, was selected as the system 
upon which the project would be implemented. 

2 • l anqua q e 

Cf critical importance was the ability of the 
language selected tc provide the necessary data structures, 
primarily records as elements of linked lists. Pascal, Ada, 
and 'C* were considered. Pascal was selected because, in 
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additicr: tc providinc the necessary data structures, ir is 
relatively self -doc umentin g, a trait of some importance 
since it is expected that future researchers will continue 
work cn this project. Also, Pascal is a well tested and 
cperaticral language. 

3 • Design M eth od cloqy 

Large software projects require some organized 
approach tc design and implementation. While 'step-wise 
refinement' is a frequently used term winh regard tc soft- 
ware design, there are numerous ideas and theories abcut 
exactly hew to carry it out. 

Cne cf the mere commonly used methodologies is that 
developed by Constantine. The 'structured design' mathed- 
clogy [Bef. 70] proposes that systems be considered as an 
input/piccess/output sequence during design. Attention is 
first focused on what functions the system will perform. 
Then these functions are examined in terms of their input 
and output components, and what transformation must occur 
between the two. This process of determining function, 
decomposing into in put/pro cess/output , and then analyzing 
each of these modules in terms of function, is repeated 
until the system has been completely decomposed. Only at 
that point dees implementation begin. 

Structurad design may be more commonly used than 
ether dasigi methodologies because it is easier to conceptu- 
alize and use, focusing as it does on input and output. 
Additionally, its dccumen t ation appears similar tc flow- 
charting, although there are significant differences. 
Finally, it can be used in conjunction with IBM's 
Hiererchical Input-Prccess-Out put (HIPO) design documenta- 
tion technicue. 
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Anocher software design approach is suggested oy 
Farnas ir. fiefereaces 71 and 72, where he emphasizes concen- 
trating cn the factors most likely and least likely to 
change, and hiding arbitrary implementation decisions. With 
this approach, specific abstract data structures are hidden 
within one module, with module interfaces revealing a 
minimum amount of information about design decisions. As a 
result of this approach to decomposition, it is possible to 
break a system down into levels of subsets, with the lowest 
level a basic, minimum subset. Modules can be placed in a 
loop-free 'uses hierarchy' of modules which use lower level 
modules . 

This information hiding and hierarchy of users 
criteria rcr system decompo sit ion , placing emphasis cr. what 
in the system is likely to change in the future, facilitates 
system change at a later date. For this reason it was 
decided that an attempt would be made to use a combination 
of the twc approaches above. There will be attempts in the 
future tc modify cr expand the implementation of this 
project, and consideration was given to making that task as 
simple as possible. 

In line with the design guidelines given by Parnas, 
consideration was given to where change was most likely to 
occur in the design system being built. Three areas were 
considered: the format of the data entered, the content of 

the data entered, and the command language used tc enter the 
data. It was decided that the content of the data which 
would be entered would be the least likely to change signi- 
ficantly, since control system components are fairly stan- 
dard. However, the format of the data, in both the source 
language and primitive list realization, was likely to 
change. Additionally, it was likely that the command 
language would expand to allow for different levels of user 
expertise . 



D. 



SISIEC COMPONENTS 



^ L angu a ge 



acfarance 38, in analyzing ISP, 
for th€ developemnt of the ideal 
descripticD language. It should: 



provides guidelines 
behavioral hardware 



provide abstraction facilities with which no add mere 
primiri ves ; 

make it pcssible tc specify behavior without structure; 

supporx structured programming consrruccs; 

make it possible to describe application specific 
infcrmaticn; 

have tbe capacity tc express concurrency; 

have the capacity tc describe multiple functions; 

have the capacity to express synchronizing primitives 
explicitly; and, 

have a formal semantic definition of language 

operations. 



Eeference 73 adds the further guidelines that a design 
language should be suitable for a variety of design applica- 
tions, be easy to learn and document through uniformity and 
brevity, be suitable for use with interactive graphics, and 
be adaptable to more complex designs. 

In the specific design language to be used, a means 
was needed to input designer information (name, date, design 
name, comments) , environmental information on variables, 
contingsney/task pair information, criteria information, and 
the actual functions and procedures for the contingencies 
and the tasks. Additionally, the language had to be able to 
store the data during run-time operations in a format 
through which the data could be easily transferred tc the 
lADEFI (identification, application timing for C/T pairs, 
design criteria, and environment) file and the primitive 
list of subroutines used in realization of the design. A 
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final reguirement was that the design also be able 
documented by an easily readable source file. 

While Biehl and Dietzinger [Bef- 13] used flow 
diagrams tc enter data, the development of higher level 
languages such as Pascal and Ada is leading to the use of 
languages rather than flowcharts to explain program design 
in the Urited States. Additionally, use of a high level 
language in design is closer to the algorithmic process, 
more like natural language, and makes the programming of 
software easier and mere efficient [Ref. 74; p. 431]. For 
these reasons, the decision was made tc use a language, 
rather than pictorial flowchart representations, tc enter 
data . 

A block structured programming language was neces- 
sary since without it the control system tasks and functions 
could not be properly entered. Wrth regard to the remainder 
cf the design data, the possibility of having no formal 
design language, but instead entering data directly intc the 
primitive list, was considered. However, software documen- 
tation is becoming increasingly important, and it was deter- 
mined that some input record in a more readable form than 
the primitive list was needed. 

As the design of the project progressed, it was 
determined that two languages, rather than one, needed tc be 
developed. The first language was needed to, as a minimum, 
enter the functions and procedures involved in the contin- 
gencies and tasks, and store data during execution. This 
can be considered a run-time language, and is written in 
terms cf the data structures used during operation of the 
design system. The second language needed was a more formal 
written language, tc be considered as a source code record 
cf the design input, and would include the control struc- 
tures of the run-time language as well as additional format 
inf or ma ticn . 
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Ihree language alt.e rnatives exist.ed; use CSEL as i* 
exists^ or with slighr modif icar ions ; find some cxher 

language; or design a new language, eirher from scratch or 
from existing pr cgramming languages. 

CSDL, or a mcdi fication of it, was considerad as a 
first alternative in language selection, since its 3NF nota- 
tion has teen written cut completely, thus facilitating the 
development of a compiler or a syntax directed editor. 
However, since its development CSDL has not become a widely 
used language. while it is conceptually helpful as a model, 
a decision was made not to become tied to the actual syntax 
of CSDL, tut to consider the second and third alternatives. 

Concerning the second alternative, finding another 
language, few other control system design languages exist. 
While the idea of using a derived CONLAN language is 
appealing, CCNLAN is still in the developmental stages. 

Consideration was also given to developing a new 
language or adapting an existing language (specif ically Ada) 
to control system design and description. Contributors to 
Reference 75 considered the required components of a hard- 
ware description language, and had mixed conclusions 
regarding adaptation of Ada as a hardware description 
language. However, Ada does meet many of the guidelines 
offered earlier in this section regarding development of 
hardware description and design languages. Also, Ada has 
teen adapted to be used as a program design language, 
FDL/Ada, as described in References 76 and 77. 

ECL/Ada was developed for three reasons: 

Ada will become a standard programming language for 
embedded systems, and use of PDL/Aaa will ease the tran- 
sition from design to code; 

Ada is a state of the art language, with support for 
software engineering concepts, and is also carefully 
controlled ; 

The Ada environment 'calls for many suopcrt tools which 
Will also be able to be used with pDL/Aaa. 
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In FDL/Ada, ccmponents of Ada were used as a basis 
for developing a software design language which could be 
processed with an Ada compiler for error checking, bur not 
actually executed. FDL/Ada is a mapping from PDL into Ada 
using : 



some of Ada exactly as written; 

some of Ada with additional constraints on its use; 

some design information written as comments in standard 
Ada ; 

some features built from Ada primitives; and 

an extension of Ada's standard oackage to include defi- 
nrticns useful to program design. 

FDL/Ada uses the same syntax as Ada. 

for reasons similar to those which led to the devel- 
opment of FDL/Ada, the decision was made to develop CSD/Ada, 
adapting Ada to be used as a control system description, 
using CSCL as a guide. First, it appears that Ada will 
become a mere widely used language as it is implemented in 
Department of Defense embedded systems. Second, Ada's 
strong typing provides a means to control and group global 
and local variables used in the design. Additionally, use 
of Ada makes it possible to develop a standard package of 
types availahie for variables to be used in designs. 

following the PDL/Ada model, a design standard 
package containing acceptable variable types was written for 
CSD/Ada. The Design Standard Package and a model for 
programs in CSD/Ada can be found in Appendix A. The run- 
time data structures, written in Pascal, can be found in the 
implementation code contained in Appendix C. 
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2 • Command Lan guage 

Given the design criteria thar rhe user net. have to 
learn a specific design/pro gracBming language, several alter- 
natives existed regarding the design cf the dialogue and 
command language. One was having the designer enter 
subroutine informaticn using the algorithmic language, with 
an editor then translating the input to CSD/Ada. However, 
this wculd still require that the designer learn a language 
for the subroutines and a format for tne remainder of the 
information . 

A second alternative was using a syntax directed 
editor to lead the designer through the full CSD/Ada format, 
with leguests for the appropriate information. This would 
reduce both the amount of typing required from the designer, 
and the eppert unities afforded the designer to make errors. 
A syntax directed editor (SDE), discussed in References 78 
and 79, and also known as a grammar driven [Ref, 80], 
language directed [Ref, 81], partially compiling [Ref. 82], 
or smart [Ref. 83] editor, allows a programmer to focus on 
the meaning rather than the punctuation and vocabulary when 
writing a program. One example is the Cornell Program 
Synthesizer, described in References 84 and 85, used as a 
tool in teaching programming and designed to allow the user 
to coEcentrate on the abstractions of a program rather than 
on the syntax cf a specific programming language, thus 
supporting top-down programming. 

SEES are generally developed from the 3NF notation 
for a language, and, with prompts, lead the programmer 
through a picgram ficm beginning to end. Using a menu or 
coded keys, the programmer types in the code for a specific 
component in or construct cf a program. The system then 
shows the user the format for the construct and gives the 
opportunity to select from a list of possible alternatives 
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tc fill in the blacks. This ensures that the programs 
written with an SDE are always syntactically correct. 

While better than the first alternative, this 
approach was also not ideal, since the designer would still 
te required to learn a specific language format, if not 
syntax. This would be appropriate were the system being 
used as a teaching tool. However, in this case the purpose 
of using an SDS is tc make it possible for the designer tc 
avoid having to learn either the syntax or the format of any 
specific language. 

A third alternative, use of a partial SDE, was 
considered and selected as the most desirable option. The 
SDE would lead the designer through the statement block of a 
subroutine and then request declaration information cn vari~ 
ables used in the subroutine. With this partial SDE, the 
designer would not have to trace through the entire program 
structure of both declarations and statements, but could 
instead concentrate cn the statement components (in CSE/Ada 
the contingency functions and task procedures) , with the 
editor then obtaining the remaining declaration type infcr- 
maticn needed. Variable types would be limited, through 
menu selection, to those types included in the CSB/Ada 
Design Standard package. This limitation is in line with 



Befarence 36 which points cut that parsers are often more 
complex than needed, and can be simplified by limiting 
programmers to a tightly ccntrcllad list of alternatives 
rather than being able to handle all possible entries. 
Beference 82 also ccntains this suggestion, particularly 
regarding types allowed for variables. 

Additionally, a means would be provided tc do 
semantic type checking during design data entry. This 
apprcach is suggested in References 37, 88 and 89, which 

describe an "incremental programming environment (I?E) " of 
which an SDE is only part. In the IPS, the SDS and the 
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incremental program constructor work, together interactively 
with the programmer. As parts of the program are entered 
through the SDE they are checked for seraantrcs. Then, if 
the semartics are correct, intermediate code is generated, 
and the pieces of the program are debugged. It appeared 
that the semantic type checking of the IPE could be applied 
to the control system design environment, using the run-time 
data structures developed for design data entry. 

Finally, lists and prompts would be used to obtain 
the remaining identification, criteria, and contingency/task 
pair information. 

Three options existed as ways to have the user enter 
choices during data entry; type in the choice word (either 
all of it or part, say the first three letters) , use a menu, 
cr use 'softkeys*. The first alternative was eliminated 
immediately for two reasons. One, it required excessive 
typing from the designer. Two, it introduced related oppor- 
tunities for errors. Both of these consequences could 
create tedious, repetitive work for the user, contrary to 
the design principles cf the system. 

With a menu, a user is required to move a marker of 
some sort (a box, an x, or an arrow) through a list of 
options cn the screen, using cursor position keys, until it 
indicates the choice being made. When the marker is next to 
the choice, the enter key is pressed to indicate the selec- 
tion. While not as tedious as entering whole words, several 
actions can be required from the user to get the marker to 
the desired choice in the list, and some eye-hand coordina- 
tion is required to knew when to stop. For that reason this 
option was also eliminated. 

Use cf softkeys [Ref- 90] also involves display of a 
list cf choices cn the screen, with each choice coded tc a 
key on the keyboard. To indicate a choice, the user presses 
the key paired with it. Possible choices can be changed by 
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changing th€ screen display. The use of sofrkeys appeared 
to allcw maximuni flexibility of choices while aiininiizirig 
both the wcrk required from the user and the opportunity for 
user errcr. Fcr these reasons it was selected as the 
primary means for data entry. However, since use of soft- 
keys is based on a menu type display, and ’menu* is a more 
commonly recognized term, 'menu' will be used in the 
remainder of this paper to refer to the softkey means of 
data incut. 

3 • Sere en Disp lav 

With the dialogue and command language decisions 
made, a need still existed for a way to make the user aware 
of the choices available at each step in the design data 
entry process. To avoid user confusion and maintain consis- 
tency as far as where to look for input options, echo of 
data entered, and design written in CSD/Ada, the decision 
was made to use a standard screen format, with categories of 
information always in the same areas of the screen. 
Additionally, the decision was made to provide the user with 
a list cf choices at each step in the data entry process. 
This would make the system self-explanatory and minimize the 
need fcr written instructions for the user, following the 
recommendations in Reference 52. 

E. BASIC INPUT AND OUTPUT STEPS 

As a result cf the design decisions outlined above, it 
was determined that the input of design information would 
have five modular components: 

obtain identification information throuqn the use of 
pr c m p ts ; 

obtain the contingency/task pair data through the use of 
prompts and menus and link it to the related function 
and procedure; 



obtain the criteria information through the use of 
prcmcts and menus; 

use a partial syntax directed editor to obtain the 
statement blocks of the functions and procedures, making 
lists cf variable names as they are used; 

traverse th® list cf variables when the entry of each 
subroutine is complete, making up both the environmental 
table and the local variable table. 

Users will be able tc select the order in which they will 
work in these areas, with the only limitation that global 
and Iccal variable lists be updated following the entry of 
each subrcutine. 

Cnee the user decides to exit the design entry phase, 
data will be passed tc the second phase of the system. In 
phase twe the user has three options; convert the data for 
a realization, make changes in the data, or write the data 
to a file in CSD/Ada format. If the user decides to convert 
the data tc primitive list format for a realization, the 
system will check tc ensure that data has neen entered in 
each category and subroutines have been linked to the appro- 
priate cent ingency/task data. If the decision is made to 
writs the data to a file, identification information, 
contingercy/task pair information, and design criteria will 
he written as comments in a conventional Ada package, with 
the environment table and the subroutines written as decla- 
rations with comments and subroutines in a conventional Ada 
package . 

Chapter Four details the actual implementation of this 
system. 
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Ih€ system was inflemanted basically as planned and has 
been run success fully . An example of the system output is 

included as Appendix E. Implementation code is included as 
Appendix C. 

A. DATA CBGANIZATION 

Organization of run-time data into a hierarchy of 
records, as mentioned in Chapter Three, and shown in Figure 
4.1, provided the basic structure for implementation. A 
header record, the root of the data tree, was used to 
provide pointers to identification, criteria, contingency/ 
task pair, environment, function, and procedure records. 
Multiple records were able to be added in a linked list form 
for repeating contingency/t ask, environment, and subroutine 
occurrences, while single records were used for identifica- 
tion and criteria data. In some data subsections, an occur- 
rence also became the root of a subtree of records 
containing specific types of data, such as comments, volumes 
and mcniters for criteria data, or local variables and 
statements for subroutines. Additionally, pointers were 
used to link the contingsne y/task pair record and the func- 
tion and procedure records to which it referred. 

E- EBOGEAM ORGANIZATION 

Five major sets of subroutines were needed for data 
entry and manipulation. Listed from highest to lowest 
priority with regard to initial implementation, they were: 
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Figure 4.1 Hierarchy of Run Time Data Structures, 
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entry : cttain original information from designer; 

write : read inf oimation from a record, write it rc a 

permansn" file for storage; 

change ; make changes to data already entered in 
records ; 

convert : convert data in the records tc primitive list 

format for realization; 

read : read information from a file already created back 
intc records tc work wrrh it. 

Within each set, lower level subroutines were clcsely 
matched tc the record with which they would be used. 

Additionally, routines were needed to handle graphics 
displays tc the screen. This included instructions, menus, 
messages, and display of data entered. 

Subroutines were categorized and placed in one ci four- 
teen files, as described belcw. Subroutines within each 
file were divided intc categories by level of complexity, 
for example, primitive routines and higher level routines 
which called them, and by category of design data with which 
they dealt, for example identification or contingency/t ask 
pair . 



1 . Cesion 

CESIGN.PAS is the main file. It contains code to 
tell the system compiler to include all other files, and it 
contains the main subroutine and variables which it uses. 
It also contains introductory and instructional subroutines, 
as well as ether subroutines called directly by the main 
subroutine cr for which ether appropriate files have not yet 
been created. 

2. Records 

RECCEDS.PAS contains the data types and data struc- 
tures created for the run-time environment. While it 
consists primarily of records and pointers to them, it also 
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conzaius seme basic xype declarations such as 'lin6_£ize* 
and ’narae_size' used with character strings, and various 
enumerated types used in the records. 

3 . Screen 

SCBEEN.PAS centains the primitive graphics subrout- 
ines, fer example these used to change screen set-up codes 
and alert the terminal to an upcoming graphics command. 
Additionally, it centains subroutines to draw the screen, 
erase the total screen or specific areas of it, and position 
the cursor to write a message. 

2ixt 

TEXI.PAS consists of subroutines to write the title 
screen and instr uct icnal screens. 

5 . Mes sages 

hESSAGES.PAS contains one subroutine, 'Message*, 
which uses a case statement to write various messages, 
called by number, to the message area on the screen. 

6 • Pil es 

MENCS. PAS and MSNUS2.PAS contain both primitive and 
higher level routines to write menus to the screen menu 
area. Primitive routines are used to establish cursor posi- 
tions for menu lines, line markers, and instruction lines. 
Menu use instructions are included as subroutines to be 
called by the two basic types of menus used - data entry or 
menu code entry. Menu components which will be used by more 
than cne menu have teen written as separate subroutines. 
Higher level menu subroutines have been categorized by the 
data to which they apply : identification, criteria, 

contingency/task pairs, subroutines, and variables. Menus 
for entering variable information are in MENUS2; all ether 
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menus are located in dENUS, along with code, to tell the 
system compiler to include the dENUS2 file. 



7 . C i silay 



CISELAY. PAS 
data entered in the 
back to the user, 
establish standard 
higher level routin 



consists of subroutines used tc write 
run-time records to the screen for feed- 
A lower level subroutine is used tc 
cursor positions for each line, with 
es categorized oy data section. 



8. Check 



CHECK. PAS contains primitive routines called in both 
the entry cf data and the changing of data to check char- 
acter strings, digit strings, and traverse linked lists of 
records checking for matching names. 

9 . Cha nge 

CHANGE. PAS contains routines used the make changes 
in data already entered and displayed on the screen. 

10. Hntr^ File s 



ENTEB. PAS and ENTEB2.PAS contain sunroutines used 
for the actual data entry. ENTEB contains primitive rout- 
ines tc enter character strings, digit strings, and lines of 
comments, and check subroutine names already entered, as 
well as higher level routines used in entry of identifica- 
tion and ccntingancy/task data. It also includes the main 
data entry routine, and cods to alert the system compiler to 
include ENTEE2. ENTEE2 consists of the subroutines used to 
enter criteria data, functions and procedures, and variable 
data . 
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FILES. PAS ccnsisxs of subroutines to open a file, 
write the data from the run-time data structures to it in a 
format siiilar to Ada, and then close the file. Subroutines 
are categorized by the section of data with which they are 
concerned, such as criteria or contingency/t ask pairs. 
Additionally, a lower level routine to write comments to the 
file is included, and called by several of the higher level 
routines . 

12. Con vert 

CCNVERT.PAS contains routines used in conversion 
from the run-time data structure format to primitive list 
format for realization. 

C. SCREEN LAIOOl 

Display of instructions uses the entire screen. For all 
other actions, the screen is divided into four areas - menu 
and menu instr actions , input, messages, and data display - 
with text in each area color coordinated, as shown in Figure 

4.2. 



D. SXSTEH CPEHATION 

System operation begins with the display of a title 
screen. At this point the user is given the option of 
reading some general instructions first or beginning data 
entry immediately. 

Design data entry follows a path from the more general 
areas to the more specific. The user is allowed to pick one 
of five areas in which to enter data - identification, 
criteria, ccntingency/task pairs, functions, or procedures, 
or to decide to exit the data entry section. Once cne of 
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Figure 4,2 Screen Layout, 

the data areas is selected, the user is led through all of 
the data it-sms needed for one set. of data in that area, with 
menus used to prompt and limit the data choices which can be 
entered. Entries are echoed immediately in the input area 
cn the screen. In addition, when all data has been entered 
in a eecticn, the ccmplate set of data is written tc the 
screen in the display area. Although not yet fully imple- 
mented, at this point the designer will, in the future, be 
able to make changes in the data displayed. 

Following data entry f o r a section, the user is returned 
to the start of the data entry loop and again allowed to 
pack cn= of the five data entry areas or exit, with the 
condition that data can be entered in the identification and 
criteria areas only crce. 
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When -th€ user is dene enrering data and decides tc exit, 
the system moves to phase two, data manipulation. Although 
not yet fully implemented, three options are availsble. 
Changes can be made to the data, it can be converted tc a 
primitive list format, and a realization can be generated, 
or it can be writtten to a permanent file. Again, the user 
continues returning tc these options in a loop until he or 
she decides to exit from phase two. The exit from phase two 
terminates the program. 

E. EEBOE CHECKING 

There are several components of the error checking 
system. In general, data is checked when it is entered. 
When an error is found by one of the components, cr confir- 
mation of an entry is needed, a message is written tc the 

message area of the screen with specific information. 

^ C h eck s 

Entry of data takes one of three forms. The user 
can be asked to enter either the code for one of the choices 
cn the menu, a character string, or a numerical value. In 
the first case, if the user enters a code not in the menu, a 
message will be written explaining the error and asking that 
the entry be repeated. In the second and third cases, 
specific subroutines are used to checK data entered. 

a. Check__Item 

•Check^Item' is called when the user is entering 
identifiers, and it checks for errors commonly made in vari- 
able and subroutine names, as well as specific design system 

constraints. It will give an error message and ask for a 
repeat of the entry if the identifier rs longer than ten 
characters, does net start with a letter, or contains 
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tlanks. Entry cf cnly a carriage raturn will result in a 
string of length zero, and the user will be asked tc repaat 
the process. 

t. Check_Digits 





'C heck_ 


Digits* 


is called when the 


user is 


entering numerical 


values. 


It reads input as a 


character 


string and 


checks t 


o ensure 


that length does not 


exceed six 


digits (a 


size 


selected 


to ensure that a 


set of 



contingency/task data can be writttan as one line cf a 
file), ard cnly digits have been entered. It then calls a 
systeiE library routine to convert the character string of 
digits to its integer value. Entry of only a carriage 
return will result in a value of zero being assigned tc the 
variable in question. 

2 • £ ubi cut i ne Haje Che eking 

Ecth cent incency/task and subroutine data entry 
routines do extensive subroutine name checking, based on the 
premise that each function and procedure will be part of 
cnly cne contingency/task pair. Subroutine records can be 
entered through either subroutine entry procedures or 
cont inger.cy/tas k pair entry procedures. Both will enter 
name .and subroutine kind. However, subroutine entry will 
enter statements and set the conti ngency/task pointer tc 
nil. Contingency/task pair entry will enter a contingency/ 
task pointer and set the statement pointer to nil. This 
makes it possible to determine how much of the data related 
to a subroutine has teen entered. 

when entering contingency/task pair data, a check 
will be made of both the initialization and run-time lists 
to ensure that neither the function or subroutine has been 
included in a cont ingency /task pair already entered. A 
check will then be made of the function and procedure lists. 
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If the subECutine has already been sneered^ it will be 
linked tc the conningency/task pair record. If not, a new 
subroutine record will be added, the name and kind entered 
with the ether fields set to nil, and the subroutine record 
will be linked to a cent ingency/task pair record. 

When a subroutine is to be entered, a check will be 
made to see if the name has already bean used. If it has, a 
check will be made of the statement pointer. If it is not 
nil, a message will be returned that the entire subroutine 
has already been entered. If it is nil, this record will be 
selected as the one in which to enter the rest of the 
subroutine data. If the name is not located, a new record 
will be added, the centinge ncy/task pointer set to nil, and 
the rest of the subroutine data entered. 



3 • Statement Con: pon ent Che ckin g 



Cse of the partial syntax directed editor fer entry 
of statements ensures that all statements entered are 
syntactically correct. ilenus used to list options for 
information entered about variables, such as precision or 
technology, minimize the chance of entry of incorrect data 
by the user. Finally, use cf pointers to link all variables 
in an expression irakes it possible to implement more 
detailed type checking as work- on tne system continues in 
the future. 



U. Ccmcleticn Check 



When the user decides to convert the data tc primi- 
tive list format, a check will be made to ensure that all 
data needed has been entered. The first check will be of 
the header record, tc see that identification and criteria 
links are net nil. Then, based on the procedure for 
subroutine record entry described above, a check will be 
made cf the function and procedure lists, to make sure that 
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each £ uticutine has borh sratemen^s entered and a pointer 
linkitg it to a contingency /task pair record. 

5 . File Not ati on 

As a reminder to the designer, and for future use 
when data in files can be read back into the system, 'no 
data entered' is written in sections of the file for which 
no data at all has been entered. 

6. Fxit Check 

Since exiting from phase two of the system will 
result in destruction of the run-time data structure, a two 
step procedure is used to confirm that the user does actu- 
ally want tc terminate the design process. 

Chapter Five will evaluate the system, discuss prcb- 
lems encountered in inpleme nting it, and suggest areas for 
future work. 
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CONCIOSIOHS MD RECQMaENDATIONS 
A. GCALS CF THE PROJECT 

The goals originally established with regard to this 
froject were to design a workstation which would not require 
its user to learn a specific language for data entry, 
present a user-friendly approach to the user, and produce an 
output of the data entered in a user readable format which 



could also oe 


converted tc a p 


rimitive 


list format. 


Considering this 


project as a first 


impleme 


ntation, these 


coals have teen 


met. Use of the sys 


tem has 


shown that, for 


a user familiar 


with the general 


concepts 


of at elan's 



Computer System Design Language and Ross* computer aided 
design process, the screen instruction and error checking in 
the system are sufficient to ensure correct and complete 
data entry. The preliminary work done in making changes to 
data already entered indicates that it should be possible to 
expand the system to read in data from a file and repeatedly 
modify data for different realizations. 

E. FECEIEfl AREAS 

While the system was implemented successfully, there 
were difficulties in working with the GIGI terminal. 
Although GIGI's graphics language can be embedded within 
Pascal, there was little documentation available on how to 
use it in an interactive setting and how to use it ether 
than tc draw pictures. The most significant problem 
occurred in cods sequences which shifted the terminal from 
an interactive Pascal command mode, such as reading an 
input, to a graphics command mode, such as writing a 
message. A *1* at the start of a sequence of code is the 
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•zc the terminal that 



signal tc indicate tc the terminal that the code fcllcwing 
it is a graphics display instruction. While the at the 

start of a graphics command is sufficient to alert the 

terminal siithin a seguence of graphics actions, it is not 
sufficient tc switch the terminal from Pascal to graphics. 
It was necessary tc include an additional wake up 'I*, 

included as the first command in graphics routines, such as 
clearing areas of the screen, likely to be called immedi- 
ately fcllcwing Pascal commands. 

An additional problem occurred in writing data entered 
in records back to the screen for display. While it was not 
difficult tc determine how to write a specific character 
string tc the screen, it was less obvious how to write the 
value cf a variable or contents of a record field tc the 

screen. The necessary procedure is less than logical, and 

was fcund through trial and error rather than in availanls 
documentaticn. 



Finally, writing the graphics commands for each line of 
text was fcund to be tedious. Use of the GIGI macros was 
considered tut decided against for two reasons. When first 
used the macros fcere found to be unreliaoie, although this 
may have keen due tc the problems of switching from Pascal 
to graphics commands mentioned earlier. More importantly, 
the use cf macros appeared tc decrease, rather than 
increase, readability. This is because they can be identi- 
fied by cnly one letter, rather than by a word that indi- 
cates function. An attempt was made to replace the graphics 
command strings with Pascal variables of type 'packed array 
cf characters' which had been assignee the graphics command 
strings as values. However, this attempt to make the 
graphics commands mere readable and reduce required typing 
was unsuccessful. 
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c 



FOTUEE HOHK 



There are several areas for fuxure work as a resulx of 
this project. In the field of comparer aided design system 
design there is much room for expansion cf the current 
system. The syntax directed editor can be enlarged to allow 
for a full block structured language. The ccntingency/task 
data eptiens not yet implemented can be added. The means 
for data change and cenversion to primitive list format can 
be fully implemented. Finally, the means to read data in 
from a previously written file can be designed and 
implemented . 

With regard to writing of data to a file, there is room 
for system modification and further expansion. The use of a 
standard file name and file type is based on ’ise of an oper- 
ating system which numbers file copies, and retains previous 
copies until the user deletes them, rather than writing over 
them when an additicnal file of the same name and type is 
created. It would be beneficial to allow the user to enter 
the file name and file type whan the decision is made to 
write the data to a file. This will allow different 
versions cf a design to have different names. Additionally, 
there is work to be done in strengthening the link between 
CSD/Ada and Ada. Includad in this is adding to the subrout- 
ines used to write the run-time data to a file so that the 
cutput mere closely matches Ada format. 

In the field of user-friendliness, there is opportunity 
to expand and add flexibilty to the nnstructions included 
within the design system. Introductory instructions can be 
increased, and the user can be given the opportunity to 
select specific instruction screens and enter and exit the 
instructions at other than the beginning and end cf the 
sequence cf screens. It would also be worthwhile to take 

advantage cf the use cf case statements for menu code entry 
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and add a cede fer tke opx.icn of a help request. This 
aake in f ermation in a specific area available during 
data entry process. 

Kuch work remains to be done in expanding and impr 
the systeiE. However, it is clear that this prejee 
shown that it is possible to design and implement a 
friendly work station for computer aided design. 



wo ul d 
tne 

ov ing 
t has 
user- 
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appendix k 

CSD/aDA 



Paclcace <3 €sign_standaid is 
type analog is integer; 

type bocln is boclean; -- * true/false 
type ext fixed is integer; 
tyce €xt“float is integer; 
type int”fixed is integer; 
type int”float is integer; 

end design^stan dard ; 

with design^standard ; use dssign_standard; 

Package ccntrol^syst eiD_desi gn is 
-- identification block 

— identification data 

-- criteria blocK 

— criteria data 

-- cent ingency/task block 

-- cont ingsney/tas k pairs data 

-- envirenment table 

variable : type; — additional global variable data 

-- subroutine list 

function name (input) returns type; 
procedure name (input; output) ; 

end ccntrcl_sy St em_design; 

package body control_system_design is 

i* complete code for functions and procedures 
listed here *) 
end cent icl_syst em_design; 
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function funci-one 



function func**two 
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orocedure proc^'two 



issue (a 
end; 
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write s ub rou t i ne 
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